CVE-2003-0693: Critical severity OpenBSD OpenSSH vulnerability
Published Sep 17, 2003
·Updated
A "buffer management error" in bufferappendspace of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.
Affected Software
1 affected component
OpenBSD OpenSSH<=3.7
Remediation
Patch Available
Event History
Sep 17, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Sep 22, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0693?
CVE-2003-0693 is classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2003-0693?
To fix CVE-2003-0693, upgrade OpenSSH to version 3.8 or later.
3
What causes CVE-2003-0693?
CVE-2003-0693 is caused by a buffer management error in the buffer_append_space function of buffer.c.
4
Who is affected by CVE-2003-0693?
OpenSSH versions prior to 3.7 are affected by CVE-2003-0693.
5
Can CVE-2003-0693 be exploited remotely?
Yes, CVE-2003-0693 can be exploited by remote attackers to execute arbitrary code.